MAL-2025-191883

    Dashboard / Malicious Package / MAL-2025-191883

    MAL-2025-191883

    Published: 18 Jul 2025Last Modified: 12 Dec 2025

    Summary: Malicious code in svcmanager (PyPI)

    Details: Source: kam193 (062d589e7c49394864a13694f3de2a89589fd2f5e6a4d2e43e35ce136b6e7e9c) Package attempts to download an executable and install it as a privileged service. The executable seems to be modified remote access tool Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-07-svcmanager Reasons (based on the campaign): - Downloads and executes a remote executable. - backdoor

    References: https://www.virustotal.com/gui/file/f1bf511ab38a42a2c4c870deb1cd049f56862683471cb103cb845a134e65d82b?nocache=1, https://bad-packages.kam193.eu/pypi/package/svcmanager

    Affected packages

    Package

    Name: svcmanager

    Purl: pkg:pypi/svcmanager

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.1
    MAL-2025-191883 | CVE-DB